Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions Block search words in XGS2100 not working

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
+1 person also asked this people also asked this
Locked Locked
Replies 8 replies
Answers 1 answer
Subscribers 42 subscribers
Views 3293 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block search words in XGS2100 not working

Junaid Farooqui 4 months ago

Dear all,

For some reason the search block policy is not working. Attaching screenshots from categories, policies and firewall rule.

This thread was automatically locked due to age.

Top Replies

Michael Dunn 4 months ago +2 verified

When there is an HTTPS connection with no HTTPS decryption the proxy cannot see the full URL that they are going to, only the hostname. All search engines use HTTPS. Therefore currently the custom category…

Parents

+1 Michael Dunn 4 months ago

When there is an HTTPS connection with no HTTPS decryption the proxy cannot see the full URL that they are going to, only the hostname.

All search engines use HTTPS. Therefore currently the custom category that you created would only trigger if those words appear in the hostname. If you want to use the web proxy apply policies based on the full URL you need to Decrypt HTTPS.
Cancel
Vote Up +2 Vote Down

Cancel
0 Junaid Farooqui 4 months ago in reply to Michael Dunn

Thank you Michael Dunn . Did you mean to enable "Decrypt HTTPS during web proxy filtering"? under firewall rules? All traffic get blocked if I enable this feature.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 4 months ago in reply to Junaid Farooqui

Hi,

have installed the XG CA on the devices?

Ian

This KBA written by Michael might help.

https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/121482/sophos-firewall-https-decrypt-and-scan-faq

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 EAP

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 Junaid Farooqui 4 months ago in reply to rfcat_vk

Previously not. I have just now tried after importing the certificate manually on a machine, in browser but didn't work.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Junaid Farooqui 4 months ago in reply to rfcat_vk

Previously not. I have just now tried after importing the certificate manually on a machine, in browser but didn't work.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Bharat J 4 months ago in reply to Junaid Farooqui

Try this steps again

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Certificates/HowToArticles/CertificatesAddCAManually/index.html#install-the-ca-in-operating-systems

Regards

"Sophos Partner: Networkkings Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Junaid Farooqui 4 months ago in reply to Bharat J

Bharat J I did try but the search still showed up after the import in browser and O.S as well.
Cancel
Vote Up 0 Vote Down

Cancel
0 Bharat J 4 months ago in reply to Junaid Farooqui

Check default CA is uptodate ?

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/index.html?contextId=DefaultCertificateAuthorityEdit

Please go to developer tool and share view certificate under Security on web browser.

Regards

"Sophos Partner: Networkkings Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel